$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa File: 0baf61e0-eead-323c-b72c-efaab2756610.roa (raw, json) Hash identifier: vwqWCBWHXclS2wSi4pkIbDYnWg3lJ6JsQzAdNUXPxlI= Subject key identifier: 0C:87:B0:29:B9:3A:7F:C0:23:7C:A5:C7:48:24:BB:E5:2F:AA:ED:81 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584B6631F7589178B7FC23FEDF80 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 16433 IP address blocks: 216.20.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f7:58:91:78:b7:fc:23:fe:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=98e995f5-0c37-4a02-9125-c7cf381b4a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bf:50:e8:f5:df:f1:ca:87:51:45:05:2c:ae: 08:af:99:8c:ff:a7:28:b1:d0:53:a7:4b:15:25:cc: 3f:78:17:52:1f:e6:1f:68:40:a3:77:16:ec:d1:93: 34:59:0c:bc:c7:bf:3d:dd:09:de:dc:37:49:0f:ae: 40:85:bb:ea:d6:c9:97:ca:86:62:c3:6a:ae:e8:c5: 82:d3:89:29:db:6e:79:69:c5:ca:24:16:19:56:c9: 06:a5:82:2e:dc:ae:b6:2c:c0:fa:19:f9:c4:df:f6: bc:6f:70:a7:66:9d:ba:e6:32:a5:dd:3d:1c:22:0f: 7e:57:cf:38:12:74:6f:7c:0f:3a:6a:53:99:fc:43: 4a:e2:a8:25:8b:d0:af:05:df:f6:cc:4a:fb:f7:78: 8b:6f:e3:59:b3:f0:52:c4:28:e3:a7:8e:c1:95:46: 35:19:db:fe:6b:db:99:93:6e:57:37:5f:1c:8a:dc: db:09:e0:f4:5a:c1:9a:08:b7:7c:48:b7:2c:91:65: 43:9b:fd:4b:11:b1:bf:31:a0:18:1b:16:c2:51:1b: 20:7c:be:52:db:d6:15:c8:38:00:59:07:83:45:6a: 22:7c:39:4b:6b:45:3d:af:98:b1:06:7e:ad:e0:1e: 4a:62:6b:ce:14:0f:f3:6c:74:83:08:5a:5b:0c:6b: b4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:87:B0:29:B9:3A:7F:C0:23:7C:A5:C7:48:24:BB:E5:2F:AA:ED:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 216.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b5:43:08:d5:dc:8a:1d:44:95:c2:60:37:c9:cc:ef:bf:78: ef:c4:ce:c3:b5:de:ad:c8:08:c3:50:9e:1b:9e:5c:70:27:ac: e9:9e:8e:e0:11:48:c0:75:c9:d6:5e:ae:2a:46:4a:d6:bd:97: 8a:94:c8:b4:a0:b1:8c:63:61:46:8f:66:c9:eb:2d:9d:ff:5f: 47:4d:07:08:82:72:23:b1:c3:a2:b9:82:e1:76:51:24:9c:59: 08:6a:60:07:22:80:ba:c1:74:96:61:24:cc:97:41:e9:c1:49: 75:56:8d:76:f8:59:ab:21:f0:49:27:fa:c1:57:13:2a:5e:ec: 06:90:fb:91:19:4b:58:e0:72:15:96:85:0c:95:6c:52:d2:44: 3e:1f:4a:50:9f:64:9f:5a:fd:59:29:d0:23:b9:8a:14:3a:5e: e5:17:5f:7c:33:14:f5:42:9f:37:36:93:89:ab:64:9d:83:b1: 80:e6:c3:23:46:86:47:b4:20:1e:0d:3a:be:a6:55:dc:7f:12: 17:fc:d7:ec:c8:a6:3b:7d:e9:ec:50:bc:8a:38:d0:1b:e1:03: 69:41:b3:ad:80:82:32:cd:d2:ce:7d:f9:a4:ed:64:db:f0:6d: da:b0:b7:00:db:31:25:d9:93:0f:a0:5d:be:ee:49:a6:82:6c: de:c4:2e:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfdYkXi3/CP+34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk OThlOTk1ZjUtMGMzNy00YTAyLTkxMjUtYzdjZjM4MWI0YTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb9Q6PXf8cqHUUUFLK4Ir5mM/6cosdBTp0sV Jcw/eBdSH+YfaECjdxbs0ZM0WQy8x7893Qne3DdJD65Ahbvq1smXyoZiw2qu6MWC 04kp2255acXKJBYZVskGpYIu3K62LMD6GfnE3/a8b3CnZp265jKl3T0cIg9+V884 EnRvfA86alOZ/ENK4qgli9CvBd/2zEr793iLb+NZs/BSxCjjp47BlUY1Gdv+a9uZ k25XN18citzbCeD0WsGaCLd8SLcskWVDm/1LEbG/MaAYGxbCURsgfL5S29YVyDgA WQeDRWoifDlLa0U9r5ixBn6t4B5KYmvOFA/zbHSDCFpbDGu0twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyHsCm5On/AI3ylx0gku+Uvqu2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMGJhZjYxZTAtZWVhZC0z MjNjLWI3MmMtZWZhYWIyNzU2NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC1QwjV3IodRJXCYDfJzO+/eO/EzsO13q3ICMNQnhueXHAnrOmejuAR SMB1ydZeripGSta9l4qUyLSgsYxjYUaPZsnrLZ3/X0dNBwiCciOxw6K5guF2USSc WQhqYAcigLrBdJZhJMyXQenBSXVWjXb4Wash8Ekn+sFXEype7AaQ+5EZS1jgchWW hQyVbFLSRD4fSlCfZJ9a/Vkp0CO5ihQ6XuUXX3wzFPVCnzc2k4mrZJ2DsYDmwyNG hke0IB4NOr6mVdx/Ehf81+zIpjt96exQvIo40BvhA2lBs62AgjLN0s59+aTtZNvw bdqwtwDbMSXZkw+gXb7uSaaCbN7ELjY= -----END CERTIFICATE-----Generated at Wed Nov 5 03:00:45 2025 by rpki-client